Privacy policy.

Temporary chats are never written to our database. They exist only in memory on your device for the duration of the session and are gone when you close the tab. No history, no sync, no trace on our side.

When you send a message, it is transmitted to our AI infrastructure partners to generate Mark's reply — that's how any AI assistant works, and we'd rather say it plainly. Those providers process your message to produce the response and are bound by their own data-protection commitments.

We do not use your conversations to train AI models, and we never sell them. Your chats exist to serve you, not to become someone's dataset.

Your data lives in a managed Postgres database with industry-standard protections:

• Encrypted in transit (TLS) and at rest.
• Row-level security — every row in the database is restricted to its owner. Even a bug in our app code can't hand your conversations to another user.
• Files you generate are stored in access-controlled storage and served through authenticated links.

If a message suggests you're going through a very hard time, Mark responds with care and shows free crisis-helpline resources. We want to be precise about how this works:

• Detection happens in the moment, on that message, to shape that one reply.
• We do not build a mental-health profile of you, score you, or store a flag on your account.
• Mark is explicitly instructed not to save crisis-related details to its memory unless you ask it to remember something yourself.
• Mark is not a medical device or therapy service — the feature exists to listen and point you to real humans who can help.

Everything is self-serve and takes effect immediately:

• Export all your data as JSON from Settings → Data Controls.
• Delete any conversation from the sidebar at any time.
• View, edit, or delete individual memories in Settings.
• Delete your entire account from Settings → Account — this permanently removes your conversations, memories, settings, and profile.

We use a small set of infrastructure providers, each receiving only what it needs to do its job:

• Supabase — authentication, database, and file storage.
• OpenRouter — routes messages to AI models to generate replies.
• Polar — billing and subscriptions. We never see or store your card details.
• Resend — transactional email (verification, receipts, important notices).
• Vercel — hosting and content delivery.

• Sell your personal data. Not to advertisers, not to data brokers, not to anyone.
• Show you ads or build advertising profiles from your conversations.
• Use your private chats to train AI models.
• Read your conversations — except if you explicitly share one with support for debugging, or where the law requires it.

We use cookies to keep you signed in and to remember your preferences.

We also use the X (Twitter) conversion pixel to measure whether our posts and ads on X actually bring people here — it tells us a visit or signup came from X, nothing about your conversations. Your chats are never shared with any advertising platform.

Saanora is not directed at children under 13, and we don't knowingly collect their data. If you believe a child under 13 has created an account, contact us and we'll remove it.

If we materially change how we handle your data, we'll email you at least 14 days before the change takes effect, and we'll update the date at the top of this page. Quiet edits to substance are not something we do.